Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L'interface de suivi du temps est vraiment dépassée.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3083089221

Proof data

Record hash (SHA-256)

09c157ca3649bf1b91a675fd1bd164c59b0bb72baa29a89a5ee75fa53c4d6fc0

Signature (Ed25519, base64)

6X/Km4ZlXi/w5WXpBbA4vQ5CJ8+AZtYXpAM7R829UsjFbThMmDShBVuL3zZMLGdUGVubTbKkYd2e+syWkIhjBQ==

Merkle root

8286585306e2f6535f24bc74a0e420351a30ee784970721b6abc81509589dea1

Merkle path

["09c39cc5c75c4ef9835222d6e643c2f4a8fed90be07d8eb9c597ae520519ba99","07740dc32feba811816c082d0234a2ddeab77f1e9dad853e59f2566e6ddb84bb","21f9d968205d1ad459146a389d70d19deeb83a7439b75c9dce3e5ac10375de5d","95c5564abae37353f1b73670f3185d054c2262dfa2def0247f80c1dd2df97af5","dd74f3c5f822bc0390858bb847f0bfd58cee007a26616d17a7de608ba168dce1","04cd19e3d8e9496dc8d1eb5cd21a6e12a5ba963a47fd048e2b2585bef02fa34c","bd35ce5bd05fcad751ca90f0d22d44681780c66917c316dd9da98837c800f17d","819218b25bc2c57903d417ae4fc9cf1919424c5241484aac0645c6e665c37b50","197f03fe9b930e4abecef2415463ea290a97387152f5bfd23ed12cca776a8648","091dc6f8ddd6a935845f3b1486c1e61ea63aac481c2fd8638df62a1f27a2af1f","6b9b6b7b20933247125d46a3778c26624fd78d7e70b27474b1ee95c5165e895b","b1ba68890d7d4050b302c55e9fc041880078575c5fc0feadd296dd3bf295de83","ce859ea8ce635c9ffd1621f04d68a115a3c98b15fb7bf1c903dc4b341afc09b3","af2e4d420aa1ef9b02bcd5685cce04b06f2bee585143ea34d6f5bfb6f2e80383","b2cc66e06d74621e7ecd1bda89175ab0d03f2896fae7cc58f9ff8df8f8d14499"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3083089221 · entry 108e9186e8c5677ac51b…

Expected log hash

74b336b309bcff3112628e1f4c16da8950920df5b515dca6ef51f80bb0b0d24a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791179522617","kind":"published-quote","locale":"fr","page":"brand:bexio","quote":"L'interface de suivi du temps est vraiment dépassée.","rating":1,"review_date":"2024-08-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.bexio.bxBexio","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8286585306e2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.